Project

General

Profile

Actions
Copy link

Bug #36480

closed

Do not make BE usernames available to the public

Added by Timo about 12 years ago. Updated almost 11 years ago.

Status:
Closed
Priority:
Must have
Assignee:
-
Category:
-
Target version:
-
Start date:
2012-04-23
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
4.5
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

After a user has logged in in the backend, typo3 creates a locallang file with the username.
Such file is created for each backend user. Each file contains the username of the backend user. This is a potential security hole, because you can filter out these usernames.

The username is added at line 425 of the backend.php.

Example:
"refresh_login_title":"Refresh Login to TYPO3 (User: admin)"

Is it possible to change this in general?

Actions
Copy link

Also available in: Atom PDF